[Glibc-bsd-commits] r4320 - in branches/squeeze/kfreebsd-8/debian: . patches

Steven Chamberlain stevenc-guest at alioth.debian.org
Tue Jun 19 12:24:49 UTC 2012


Author: stevenc-guest
Date: 2012-06-19 12:24:48 +0000 (Tue, 19 Jun 2012)
New Revision: 4320

Modified:
   branches/squeeze/kfreebsd-8/debian/changelog
   branches/squeeze/kfreebsd-8/debian/patches/SA-12_04.sysret.patch
Log:
Apply correction of SA-12:04.sysret patch from upstream (r237241);  needed for 8.1 only.


Modified: branches/squeeze/kfreebsd-8/debian/changelog
===================================================================
--- branches/squeeze/kfreebsd-8/debian/changelog	2012-06-17 12:58:24 UTC (rev 4319)
+++ branches/squeeze/kfreebsd-8/debian/changelog	2012-06-19 12:24:48 UTC (rev 4320)
@@ -2,9 +2,10 @@
 
   [ Steven Chamberlain ]
   * Apply upstream SA-12:04.sysret patch (CVE-2012-0217) (Closes: #677297)
+    - Include correction from upstream (r237241)
   * Apply upstream EN-12:02.ipv6refcount patch (Closes: 677738)
 
- -- GNU/kFreeBSD Maintainers <debian-bsd at lists.debian.org>  Sat, 16 Jun 2012 19:07:54 +0100
+ -- GNU/kFreeBSD Maintainers <debian-bsd at lists.debian.org>  Tue, 19 Jun 2012 13:18:39 +0100
 
 kfreebsd-8 (8.1+dfsg-8+squeeze2) stable-security; urgency=low
 

Modified: branches/squeeze/kfreebsd-8/debian/patches/SA-12_04.sysret.patch
===================================================================
--- branches/squeeze/kfreebsd-8/debian/patches/SA-12_04.sysret.patch	2012-06-17 12:58:24 UTC (rev 4319)
+++ branches/squeeze/kfreebsd-8/debian/patches/SA-12_04.sysret.patch	2012-06-19 12:24:48 UTC (rev 4320)
@@ -1,19 +1,22 @@
 Description:
  Correct a privilege escalation when returning from kernel if
  running FreeBSD/amd64 on non-AMD processors. [12:04]
+ .
+ Includes a corrected patch from upstream, as the original commit to
+ RELENG_8_1 accidentally applied it to the wrong location.
 Origin: vendor, http://security.freebsd.org/patches/SA-12:04/sysret.patch
 Bug: http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc
 Bug-Debian: http://bugs.debian.org/677297
-Applied-Upstream: http://svnweb.freebsd.org/base/releng/8.1/sys/amd64/amd64/trap.c?view=log&pathrev=236953
+Applied-Upstream: http://svnweb.freebsd.org/base?view=revision&revision=237241
 
 Index: kfreebsd-8-8.1+dfsg/sys/amd64/amd64/trap.c
 ===================================================================
 --- kfreebsd-8-8.1+dfsg.orig/sys/amd64/amd64/trap.c	2012-06-17 13:55:31.000000000 +0100
-+++ kfreebsd-8-8.1+dfsg/sys/amd64/amd64/trap.c	2012-06-17 13:57:30.162116018 +0100
-@@ -965,6 +965,23 @@
- 	/*
- 	 * Traced syscall.
- 	 */
++++ kfreebsd-8-8.1+dfsg/sys/amd64/amd64/trap.c	2012-06-19 12:44:37.299956401 +0100
+@@ -1010,4 +1010,21 @@
+ 	STOPEVENT(p, S_SCX, sa.code);
+ 
+ 	PTRACESTOP_SC(p, td, S_PT_SCX);
 +
 +	/*
 +	 * If the user-supplied value of %rip is not a canonical
@@ -31,6 +34,4 @@
 +		ksi.ksi_addr = (void *)td->td_frame->tf_rip;
 +		trapsignal(td, &ksi);
 +	}
- 	if (orig_tf_rflags & PSL_T) {
- 		frame->tf_rflags &= ~PSL_T;
- 		ksiginfo_init_trap(&ksi);
+ }




More information about the Glibc-bsd-commits mailing list